CVE-2026-19273

Received Received - Intake

Remote Authentication Bypass in IBM Sterling Integrator

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: IBM Corporation

Description

IBM Sterling B2B Integrator 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 and IBM Sterling File Gateway 6.2.0.0 through 6.2.0.6_2, 6.2.1.0 - 6.2.1.2, 6.2.2.0 - 6.2.2.1 Standard Edition could allow a remote authenticated attacker to bypass security restrictions due to improper authentication.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-14

Last Modified

2026-09-14

Generated

2026-09-15

AI Q&A

2026-09-15

EPSS Evaluated

N/A

NVD

CVE-2026-19273

Affected Vendors & Products

Vendor	Product	Version / Range
ibm	sterling_b2b_integrator	From 6.2.0.0 (inc) to 6.2.2.1 (inc)
ibm	sterling_file_gateway	From 6.2.0.0 (inc) to 6.2.2.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

This vulnerability affects IBM Sterling B2B Integrator and IBM Sterling File Gateway versions 6.2.0.0 through 6.2.2.1. It allows a remote authenticated attacker to bypass security restrictions due to improper authentication mechanisms.

Impact Analysis

An attacker could exploit this to gain unauthorized access to sensitive data or perform actions beyond their intended permissions. This may lead to data breaches, unauthorized transactions, or system manipulation.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA compliance. Organizations may face legal penalties, loss of certification, and reputational damage.

Mitigation Strategies

Apply the latest patches or updates provided by IBM for IBM Sterling B2B Integrator and IBM Sterling File Gateway to address the improper authentication issue.

Hi! I’m here to help you understand CVE-2026-19273. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70